Test ID:	1.3.6.1.4.1.25623.1.0.53439
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 193-1 (kdenetwork)
Summary:	The remote host is missing an update to kdenetwork;announced via advisory DSA 193-1.
Description:	Summary: The remote host is missing an update to kdenetwork announced via advisory DSA 193-1. Vulnerability Insight: iDEFENSE reports a security vulnerability in the klisa package, that provides a LAN information service similar to Network Neighbourhood, which was discovered by Texonet. It is possible for a local attacker to exploit a buffer overflow condition in resLISa, a restricted version of KLISa. The vulnerability exists in the parsing of the LOGNAME environment variable, an overly long value will overwrite the instruction pointer thereby allowing an attacker to seize control of the executable. This problem has been fixed in version 2.2.2-14.2 the current stable distribution (woody) and in version 2.2.2-14.3 for the unstable distribution (sid). The old stable distribution (potato) is not affected since it doesn't contain a kdenetwork package Solution: We recommend that you upgrade your klisa package immediately. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1247 BugTraq ID: 6157 http://www.securityfocus.com/bid/6157 Bugtraq: 20021111 iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa (Google Search) http://marc.info/?l=bugtraq&m=103704823501757&w=2 Bugtraq: 20021112 KDE Security Advisory: resLISa / LISa Vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=103712329102632&w=2 Bugtraq: 20021114 GLSA: kdelibs (Google Search) http://marc.info/?l=bugtraq&m=103728981029342&w=2 Computer Incident Advisory Center Bulletin: N-020 http://www.ciac.org/ciac/bulletins/n-020.shtml Debian Security Information: DSA-193 (Google Search) http://www.debian.org/security/2002/dsa-193 http://www.mandriva.com/security/advisories?name=MDKSA-2002:080 http://www.idefense.com/advisory/11.11.02.txt http://www.redhat.com/support/errata/RHSA-2002-220.html http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0068.html http://www.iss.net/security_center/static/10592.php
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.